[pull] main from fern-api:main#797
Merged
Merged
Conversation
* [Dependabot Alert #2090] Scaffold PR for js-yaml * fix(deps): bump js-yaml to 4.2.0 to fix CVE-2026-53550 (GHSA-h67p-54hq-rp68) * fix(deps): add pnpm override to eliminate transitive js-yaml@4.1.1 --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
…#16534) * [Dependabot Alert #2104] Scaffold PR for aiohttp * fix(deps): bump aiohttp lower bound to >=3.14.1 to fix CVE-2026-54274 * fix(deps): add changelog entry for aiohttp bump --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
…cc7-3qxx (#16536) * [Dependabot Alert #2094] Scaffold PR for form-data * fix(deps): bump form-data to 4.0.6 to fix CVE-2026-12143 (GHSA-hmw2-7cc7-3qxx) * fix(typescript): bump form-data to ^4.0.6 in generated SDKs and regenerate seed output --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Co-authored-by: David Konigsberg <72822263+davidkonigsberg@users.noreply.github.com>
Co-authored-by: davidkonigsberg <72822263+davidkonigsberg@users.noreply.github.com>
When peter-evans/create-pull-request uses GITHUB_TOKEN, the resulting push queues pull_request workflow runs that require manual approval. The previous gh workflow run workaround only dispatched workflow_dispatch events which do not satisfy PR required status checks. Replace gh workflow run with a step that finds action_required runs on the PR branch and approves them via the GitHub API so the pull_request CI runs execute and report to the PR checks, unblocking auto-merge. Applied to both update-seed.yml and fix-lint.yml. Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
…16548) The previous approach used GITHUB_TOKEN to create PRs, which caused pull_request workflow runs to require manual approval ("5 workflows awaiting approval"). The /actions/runs/{id}/approve API only works for fork PRs, so that workaround also failed. Fix: swap token roles: - FERN_SUPPORT_GH_ACTIONS_PAT creates the PR (real user push triggers workflows without needing approval) - GITHUB_TOKEN (github-actions[bot]) approves the PR (different identity from the creator) This restores the pre-#16433 behavior where PAT-created PRs triggered CI naturally, while satisfying the constraint that creator and approver must be different identities (previously broken because FERN_GITHUB_TOKEN classic PAT was banned by the org). Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: fern-support <126544928+fern-support@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )